SSL/TLS Triple Handshake Attack Demo: client cert authentication broken.

[dewey]

https://twitter.com/julianor/status/459022715194576896

[valarauca1]

The video is kind of light on information.

Here is a more in-depth post on the topic [1]. Its titled March 1st 2014, so apparently this isn't new-new.

[1] https://secure-resumption.com/